This IP address has been reported a total of
253
times from
30 distinct
sources.
104.250.39.107 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 33
reports;
Canada
with 14
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Bad Web Bot
42
times;
Web App Attack
19
times;
Exploited Host
7
times;
DDoS Attack
5
times;
Hacking
3
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/tow-truck-carrying-a-vehicle-involved-in-accident-on-librazhd-elbasan-road-tragedy-averted/944246
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/kurti-praises-visar-morina-and-the-film-shame-and-money/1016682/
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/us-iran-escalation-in-hormuz-pushes-brent-above-90-wti-gains-more-than-2/991406
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/serbian-court-orders-30-days-of-detention-for-osman-selmani-after-arrest-in-mutivode/910221
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/us-aims-to-reduce-forces-in-the-middle-east-after-a-quarter-century-of-involvement/1002326
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Broken image scraper written by someone with severe brain damage
104.250.39.107 443 - [29/Sep/2026: ...
show moreBroken image scraper written by someone with severe brain damage
104.250.39.107 443 - [29/Sep/2026:08:43:49 +0000] "GET [redacted] HTTP/1.1" 301 5483 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [29/Sep/2026:08:49:29 +0000] "GET [redacted] HTTP/1.1" 200 19816 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [29/Sep/2026:08:54:20 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [29/Sep/2026:09:16:00 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ...
show moreBnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.250.39.107 443 - [29/Sep/2026:08:24:56 +0000] "GET [redacted] HTTP/1.1" 301 5507 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [29/Sep/2026:08:43:49 +0000] "GET [redacted] HTTP/1.1" 301 5483 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [29/Sep/2026:08:49:29 +0000] "GET [redacted] HTTP/1.1" 200 19816 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [29/Sep/2026:08:54:20 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/germany-blames-russia-for-drone-attack-at-leipzig-airport-and-closes-bonn-consulate/993764
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ...
show moreBnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.250.39.107 443 - [28/Sep/2026:13:10:47 +0000] "GET [redacted] HTTP/1.1" 200 16999 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [28/Sep/2026:14:01:35 +0000] "GET [redacted] HTTP/1.1" 301 5485 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [28/Sep/2026:18:49:25 +0000] "GET [redacted] HTTP/1.1" 301 5479 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [28/Sep/2026:19:15:25 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with sev ...
show moreBnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.250.39.107 443 - [28/Sep/2026:03:16:00 +0000] "GET [redacted] HTTP/1.1" 301 681 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [28/Sep/2026:04:36:40 +0000] "GET [redacted] HTTP/1.1" 301 5499 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [28/Sep/2026:05:08:22 +0000] "GET [redacted] HTTP/1.1" 200 19528 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
104.250.39.107 443 - [28/Sep/2026:06:20:53 +0000] "GET [redacted] HTTP/1.1" 404 7112 "[redacted]" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/us-proposes-5-billion-fund-to-rebuild-middle-east-energy-infrastructure-after-war-with-iran/1023065
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Repeated exploit attempts, for example: /hybridauth/window/OpenID?destination=community&destination_ ...
show moreRepeated exploit attempts, for example: /hybridauth/window/OpenID?destination=community&destination_error=hybridauth/endpoint%3Fhauth_start%3DGoogle%26hauth_time%3D1594115790 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36")
show less
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method) ...
show moreTriggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /english/us-iran-escalation-in-hormuz-pushes-brent-above-90-wti-gains-more-than-2/991406
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
FortiWeb WAF: 90 attacks detected. Threat Score: 23600. Types: HTTP Protocol Constraints(50), Client ...
show moreFortiWeb WAF: 90 attacks detected. Threat Score: 23600. Types: HTTP Protocol Constraints(50), Client Management(20), GEO IP(20). Origin: Hong Kong, Singapore.
show less
